@camstack/types 1.1.34 → 1.1.36

package/dist/index.js

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_sleep = require("./sleep-DmP-uxoe.js");
+const require_sleep = require("./sleep-BtS3xMHv.js");
 const require_err_msg = require("./err-msg-COpsHMw2.js");
 let zod = require("zod");
 //#region src/health/wiring-health.ts
@@ -7605,11 +7605,6 @@ var PipelineSchemaSchema = zod.z.object({
 	selectedEngine: PipelineEngineChoiceSchema,
 	slots: zod.z.array(PipelineSlotSchemaSchema).readonly()
 });
-var DetectorOutputSchema = zod.z.object({
-	detections: zod.z.array(SpatialDetectionSchema).readonly(),
-	inferenceMs: zod.z.number(),
-	modelId: zod.z.string()
-});
 var EngineProvisioningSchema = zod.z.object({
 	runtimeId: zod.z.enum([
 		"onnx",
@@ -7775,23 +7770,23 @@ var pipelineExecutorCapability = {
 			auth: "admin"
 		}),
 		/**
-		* Reset ONE node's detection-pipeline to its factory defaults, forcing
-		* regeneration of the (now hardware-aware) default object-detection
-		* model. `nodeId` is the ROUTING key — the generated cap-router strips
-		* it (default `nodeIdMode: 'routing'`, same as `getSelectedEngine` /
-		* `getDefaultSteps`) and dispatches to that node, so the provider method
-		* runs ON the target node and receives no `nodeId`.
+		* Clear THIS node's executor-side PER-DEVICE settings stores (the
+		* per-camera step overrides the object-detection root reads via
+		* `applyDeviceOverridesToTree`). `nodeId` is the ROUTING key — the
+		* generated cap-router strips it (default `nodeIdMode: 'routing'`) and
+		* dispatches to that node, so the provider method runs ON the target
+		* node and receives no `nodeId`.
 		*
-		* Clears the node's persisted global pipeline seed (`pipelineSteps`) +
-		* legacy engine blob (`pipelineEngine`) and every device's per-camera
-		* step overrides, then re-seeds the hardware-aware default tree. Returns
-		* the regenerated object-detection model id (null when the default tree
-		* has no detector for this node's engine format) so the caller can
-		* verify the reset without a second round-trip.
+		* This is the slimmed executor leg of the orchestrator's
+		* `resetNodePipelineDefaults` flow (which owns the real reset: node
+		* addonDefaults pins + per-camera orchestrator overrides). The legacy
+		* `resetToDefault` — which reset a persisted global step-tree seed
+		* nothing in the live per-camera path read — was removed together with
+		* that seed.
 		*/
-		resetToDefault: require_sleep.method(zod.z.object({ nodeId: zod.z.string() }), zod.z.object({
+		clearDeviceOverrides: require_sleep.method(zod.z.object({ nodeId: zod.z.string() }), zod.z.object({
 			success: zod.z.literal(true),
-			regeneratedModelId: zod.z.string().nullable()
+			clearedDevices: zod.z.number()
 		}), {
 			kind: "mutation",
 			auth: "admin"
@@ -7837,11 +7832,6 @@ var pipelineExecutorCapability = {
 			modelId: zod.z.string(),
 			format: ModelFormatSchema$1
 		}), zod.z.object({ success: zod.z.literal(true) }), { kind: "mutation" }),
-		detect: require_sleep.method(zod.z.object({
-			addonId: zod.z.string(),
-			frame: FrameInputSchema,
-			config: zod.z.record(zod.z.string(), zod.z.unknown()).optional()
-		}), DetectorOutputSchema),
 		/**
 		* Stateless single-frame execution. Callers (runner, benchmark) pass
 		* the complete `engine` + `steps` tree; the executor holds no state
@@ -12565,7 +12555,7 @@ function createSystemProxy(api) {
 			getEngineProvisioning: (input) => dispatch("pipelineExecutor", "getEngineProvisioning", "query", input),
 			getVideoPipelineSteps: (input) => dispatch("pipelineExecutor", "getVideoPipelineSteps", "query", input),
 			setVideoPipelineSteps: (input) => dispatch("pipelineExecutor", "setVideoPipelineSteps", "mutation", input),
-			resetToDefault: (input) => dispatch("pipelineExecutor", "resetToDefault", "mutation", input),
+			clearDeviceOverrides: (input) => dispatch("pipelineExecutor", "clearDeviceOverrides", "mutation", input),
 			getSchema: (input) => dispatch("pipelineExecutor", "getSchema", "query", input),
 			getGlobalSteps: (input) => dispatch("pipelineExecutor", "getGlobalSteps", "query", input),
 			getGlobalPipelineConfig: (input) => dispatch("pipelineExecutor", "getGlobalPipelineConfig", "query", input),
@@ -12579,7 +12569,6 @@ function createSystemProxy(api) {
 			getAddonModels: (input) => dispatch("pipelineExecutor", "getAddonModels", "query", input),
 			downloadModel: (input) => dispatch("pipelineExecutor", "downloadModel", "mutation", input),
 			deleteModel: (input) => dispatch("pipelineExecutor", "deleteModel", "mutation", input),
-			detect: (input) => dispatch("pipelineExecutor", "detect", "query", input),
 			cacheFrameInPool: (input) => dispatch("pipelineExecutor", "cacheFrameInPool", "mutation", input),
 			inferCached: (input) => dispatch("pipelineExecutor", "inferCached", "mutation", input),
 			uncacheFrame: (input) => dispatch("pipelineExecutor", "uncacheFrame", "mutation", input),
@@ -12603,7 +12592,6 @@ function createSystemProxy(api) {
 			getCapabilityBindings: (input) => dispatch("pipelineOrchestrator", "getCapabilityBindings", "query", input),
 			setCapabilityBinding: (input) => dispatch("pipelineOrchestrator", "setCapabilityBinding", "mutation", input),
 			getIngestOwner: (input) => dispatch("pipelineOrchestrator", "getIngestOwner", "query", input),
-			getDecoderAssignments: (input) => dispatch("pipelineOrchestrator", "getDecoderAssignments", "query", input),
 			getAudioNodeLoad: (input) => dispatch("pipelineOrchestrator", "getAudioNodeLoad", "query", input),
 			getAgentSettings: (input) => dispatch("pipelineOrchestrator", "getAgentSettings", "query", input),
 			listAgentSettings: (input) => dispatch("pipelineOrchestrator", "listAgentSettings", "query", input),
@@ -12613,6 +12601,7 @@ function createSystemProxy(api) {
 			setAgentDetectWeight: (input) => dispatch("pipelineOrchestrator", "setAgentDetectWeight", "mutation", input),
 			setAgentCapabilities: (input) => dispatch("pipelineOrchestrator", "setAgentCapabilities", "mutation", input),
 			setAgentReachableHost: (input) => dispatch("pipelineOrchestrator", "setAgentReachableHost", "mutation", input),
+			resetNodePipelineDefaults: (input) => dispatch("pipelineOrchestrator", "resetNodePipelineDefaults", "mutation", input),
 			getCameraStatuses: (input) => dispatch("pipelineOrchestrator", "getCameraStatuses", "query", input),
 			listTemplates: (input) => dispatch("pipelineOrchestrator", "listTemplates", "query", input),
 			saveTemplate: (input) => dispatch("pipelineOrchestrator", "saveTemplate", "mutation", input),
@@ -12635,6 +12624,13 @@ function createSystemProxy(api) {
 			deletePlate: (input) => dispatch("plateGallery", "deletePlate", "mutation", input)
 		},
 		recording: { getStorageUsage: (input) => dispatch("recording", "getStorageUsage", "query", input) },
+		serverManagement: {
+			getServerPackageStatus: (input) => dispatch("serverManagement", "getServerPackageStatus", "query", input),
+			checkServerUpdate: (input) => dispatch("serverManagement", "checkServerUpdate", "mutation", input),
+			applyServerUpdate: (input) => dispatch("serverManagement", "applyServerUpdate", "mutation", input),
+			rollbackServerUpdate: (input) => dispatch("serverManagement", "rollbackServerUpdate", "mutation", input),
+			restartServer: (input) => dispatch("serverManagement", "restartServer", "mutation", input)
+		},
 		settingsStore: {
 			get: (input) => dispatch("settingsStore", "get", "query", input),
 			set: (input) => dispatch("settingsStore", "set", "mutation", input),
@@ -13398,7 +13394,9 @@ var AddonPageDeclarationSchema$1 = zod.z.object({
 	icon: zod.z.string(),
 	path: zod.z.string(),
 	remoteName: zod.z.string(),
-	bundle: zod.z.string()
+	bundle: zod.z.string(),
+	section: zod.z.string().optional(),
+	sectionLabel: zod.z.string().optional()
 });
 var AddonPageInfoSchema = zod.z.object({
 	addonId: zod.z.string(),
@@ -13445,7 +13443,18 @@ var AddonPageDeclarationSchema = zod.z.object({
 	* the static-file route can compute an mtime-based cache-buster URL
 	* without a separate filesystem stat.
 	*/
-	bundle: zod.z.string()
+	bundle: zod.z.string(),
+	/**
+	* Sidebar section this page docks into. Well-known ids: `'detection'`,
+	* `'cluster'`, `'administration'` — the page renders inside that group.
+	* Any OTHER string creates (or joins) a custom section rendered after
+	* the built-in groups; its label comes from `sectionLabel` (first
+	* declaration wins), falling back to the id. Absent → the legacy
+	* "Addon Pages" group.
+	*/
+	section: zod.z.string().optional(),
+	/** Display label for a CUSTOM `section` id (ignored for well-known ids). */
+	sectionLabel: zod.z.string().optional()
 });
 var addonPagesSourceCapability = {
 	name: "addon-pages-source",
@@ -13729,6 +13738,17 @@ var WidgetMetadataSchema = zod.z.object({
 		deviceContext: zod.z.boolean().default(false),
 		integrationContext: zod.z.boolean().default(false)
 	}),
+	/**
+	* Loadable BEFORE authentication. The normal widget registry listing
+	* (`addon-widgets.listWidgets`) is auth-gated, so a pre-auth surface
+	* (the login page) cannot discover a widget through it. A widget that
+	* declares `preAuth: true` marks itself as safe to mount on a pre-auth
+	* screen — it is surfaced through the PUBLIC `auth.listLoginMethods`
+	* login-method contribution channel (see `login-method.cap.ts`) rather
+	* than the authenticated registry, and its bundle is served by the
+	* public `/api/addon-widgets/:addonId/*` static route. Defaults false.
+	*/
+	preAuth: zod.z.boolean().optional().default(false),
 	/** Dashboard placement HINTS (operator can override per instance). */
 	defaultSize: WidgetSizeEnum.default("md"),
 	allowedSizes: zod.z.array(WidgetSizeEnum).readonly().default([
@@ -14214,6 +14234,89 @@ var authProviderCapability = {
 	/** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
 	mount: { kind: "skip" }
 };
+//#endregion
+//#region src/capabilities/login-method.cap.ts
+/**
+* `login-method` — collection cap through which auth addons contribute
+* their pre-auth login surfaces to the login page. This is the SINGLE,
+* generic mechanism that supersedes the dead `auth.listProviders` reader:
+* every auth addon (OIDC, magic-link, WebAuthn/passkey) registers a
+* `login-method` provider and the PUBLIC `auth.listLoginMethods`
+* procedure aggregates them for the unauthenticated login page.
+*
+* A contribution is a discriminated union on `kind`:
+*
+*  - `redirect` — a declarative button. The login page renders a generic
+*    button that navigates to `startUrl` (an addon-owned HTTP route).
+*    Covers OIDC (`/addon/auth-oidc/<id>/start`) and magic-link with
+*    ZERO shell-side JS. A future SSO addon plugs in the same way — the
+*    login page needs NO change.
+*
+*  - `widget` — a Module-Federation widget the login page mounts (via
+*    `loadRemoteBundle`) for an in-page ceremony. Covers the passkey
+*    login ceremony, which must run `@simplewebauthn/browser` INSIDE the
+*    addon bundle. The referenced widget also declares `preAuth: true` in
+*    its `addon-widgets-source` catalog entry. `auth.listLoginMethods`
+*    stamps a public `bundleUrl` from `addonId` + `bundle`.
+*
+* Every contribution carries a `stage`:
+*  - `primary`        — shown on the first credentials screen (OIDC /
+*                       magic-link buttons; a future usernameless passkey).
+*  - `second-factor`  — shown AFTER the password leg, gated on the
+*                       returned `factors` (passkey-as-2FA today).
+*
+* `mount: skip` — the cap is read server-side by the core auth router
+* (`registry.getCollection('login-method')`), never mounted as its own
+* tRPC router.
+*/
+/** When a login method renders in the two-phase login flow. */
+var LoginStageEnum = zod.z.enum(["primary", "second-factor"]);
+/**
+* A declarative redirect button — the login page navigates to `startUrl`.
+* OIDC and magic-link contribute this; a future SSO addon does too.
+*/
+var RedirectLoginMethodSchema = zod.z.object({
+	kind: zod.z.literal("redirect"),
+	/** Stable id within the login-method set (e.g. `auth-oidc/google`). */
+	id: zod.z.string(),
+	/** Operator-facing button label. */
+	label: zod.z.string(),
+	/** lucide-react icon name. */
+	icon: zod.z.string().optional(),
+	/** Addon-owned HTTP route the button navigates to (GET). */
+	startUrl: zod.z.string(),
+	stage: LoginStageEnum
+});
+/**
+* A Module-Federation widget the login page mounts for an in-page
+* ceremony. `bundle` + `addonId` let `auth.listLoginMethods` stamp a
+* public `bundleUrl`; `remote` is the MF descriptor `loadRemoteBundle`
+* consumes. No `bundleUrl` here — it is server-stamped on the public
+* output so the addon never encodes the static-route scheme.
+*/
+var WidgetLoginMethodSchema = zod.z.object({
+	kind: zod.z.literal("widget"),
+	/** Stable id within the login-method set (e.g. `auth-webauthn/passkey-login`). */
+	id: zod.z.string(),
+	/** Owning addon id — drives the public bundle URL + the MF namespace. */
+	addonId: zod.z.string(),
+	/** Bundle filename inside the addon's dist dir (`remoteEntry.js`). */
+	bundle: zod.z.string(),
+	/** MF remote descriptor — `{ remoteName, exposedModule, componentKey }`. */
+	remote: WidgetRemoteSchema,
+	stage: LoginStageEnum
+});
+/** One login-method contribution — redirect button OR pre-auth widget. */
+var LoginMethodContributionSchema = zod.z.discriminatedUnion("kind", [RedirectLoginMethodSchema, WidgetLoginMethodSchema]);
+var loginMethodCapability = {
+	name: "login-method",
+	scope: "system",
+	mode: "collection",
+	internal: true,
+	methods: { getLoginMethods: require_sleep.method(zod.z.void(), zod.z.array(LoginMethodContributionSchema).readonly()) },
+	/** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
+	mount: { kind: "skip" }
+};
 /**
 * Orchestrator-side destination metadata. The orchestrator computes
 * `id = <addonId>:<subId>` from its provider lookup so consumers
@@ -17601,7 +17704,12 @@ var AgentPipelineSettingsSchema = zod.z.object({
 	detectWeight: zod.z.number().positive().optional(),
 	/** Node is eligible to run the detection pipeline (decode + inference). */
 	detect: zod.z.boolean().optional(),
-	/** Node is eligible to host decoder sessions. */
+	/**
+	* DEPRECATED AND IGNORED. Decode is always co-located with its frame
+	* consumer, so decode eligibility IS detect eligibility. Kept optional in
+	* the schema ONLY so persisted stores written before the removal still
+	* parse — no code reads it and no write path emits it.
+	*/
 	decode: zod.z.boolean().optional(),
 	/** Node is eligible to run audio-analyzer sessions. */
 	audio: zod.z.boolean().optional(),
@@ -17662,25 +17770,6 @@ var PipelineAssignmentSchema = zod.z.object({
 	assignedAt: zod.z.number()
 });
 /**
-* Decoder placement record. Symmetric to `PipelineAssignmentSchema` but for
-* the decoder-node placement domain (`balanceDecoder` decision: manual pin
-* → co-located with pipeline → capacity).
-*/
-var DecoderAssignmentSchema = zod.z.object({
-	deviceId: zod.z.number(),
-	/** Moleculer node id of the decoder provider currently responsible for this camera. */
-	decoderNodeId: zod.z.string(),
-	/** True when the assignment was set manually via `assignDecoder`, false when chosen by the balancer. */
-	pinned: zod.z.boolean(),
-	/** Why this assignment was made — useful for debugging the decoder balancer. */
-	reason: zod.z.enum([
-		"manual",
-		"co-located",
-		"capacity",
-		"hardware-affinity"
-	])
-});
-/**
 * Per-agent load summary surfaced to the load balancer + dashboards.
 * Aggregated from each runner's `getLocalLoad` cap call.
 */
@@ -17967,21 +18056,6 @@ var pipelineOrchestratorCapability = {
 		* present. Defaults to `{ ownerNodeId: 'hub' }`.
 		*/
 		getIngestOwner: require_sleep.method(zod.z.void(), IngestOwnerSchema),
-		/** Pin a device's decoder to a specific node. */
-		assignDecoder: require_sleep.method(zod.z.object({
-			deviceId: zod.z.number(),
-			nodeId: zod.z.string()
-		}), zod.z.void(), {
-			kind: "mutation",
-			auth: "admin"
-		}),
-		/** Clear a device's decoder pin (revert to auto). */
-		unassignDecoder: require_sleep.method(zod.z.object({ deviceId: zod.z.number() }), zod.z.void(), {
-			kind: "mutation",
-			auth: "admin"
-		}),
-		/** Get every camera's decoder placement. */
-		getDecoderAssignments: require_sleep.method(zod.z.void(), zod.z.array(DecoderAssignmentSchema).readonly()),
 		/** Pin a device's audio analysis to a specific cluster node. */
 		assignAudio: require_sleep.method(zod.z.object({
 			deviceId: zod.z.number(),
@@ -18013,23 +18087,6 @@ var pipelineOrchestratorCapability = {
 			pinned: zod.z.boolean(),
 			assignedAt: zod.z.number()
 		}))),
-		/**
-		* Get one camera's decoder placement (computed if not yet pinned).
-		*
-		* ADVISORY today: reports the orchestrator's decoder preference only.
-		* Actual decode placement is broker-owned (local-node pin + frame-plane
-		* co-location guard). Reserved to become the binding source/decoder-owner
-		* control in the stream-LB epic (Phase 2).
-		*
-		* `pipelineNodeId` is the node already chosen to run inference for
-		* this camera. When provided, the balancer prefers co-location with
-		* it; omitted → falls back to the last known assignment in the
-		* `assignments` map and finally to 'hub'.
-		*/
-		getDecoderAssignment: require_sleep.method(zod.z.object({
-			deviceId: zod.z.number(),
-			pipelineNodeId: zod.z.string().optional()
-		}), DecoderAssignmentSchema),
 		/** Read one agent's settings. Null when not yet seeded. */
 		getAgentSettings: require_sleep.method(zod.z.object({ agentNodeId: zod.z.string() }), AgentPipelineSettingsSchema.nullable()),
 		/** Enumerate every agent's settings (hub + remote runners). */
@@ -18099,14 +18156,15 @@ var pipelineOrchestratorCapability = {
 		* `enabledDecoderNodes`, `enabledAudioNodes`, `remoteSourcingNodes`).
 		* Each flag is optional in the patch: omit a flag to leave it unchanged,
 		* pass `null` to reset it to the node default (`hub` → capable, every
-		* other node → not). Detection/decode/audio eligibility is derived from
-		* these flags across the cluster; changing them re-derives the enabled
-		* sets and reconciles dispatch immediately.
+		* other node → not). Detection/audio eligibility is derived from these
+		* flags across the cluster; changing them re-derives the enabled sets
+		* and reconciles dispatch immediately. There is NO separate decode flag:
+		* decode is always co-located with its frame consumer, so decode
+		* eligibility IS detect eligibility.
 		*/
 		setAgentCapabilities: require_sleep.method(zod.z.object({
 			agentNodeId: zod.z.string(),
 			detect: zod.z.boolean().nullable().optional(),
-			decode: zod.z.boolean().nullable().optional(),
 			audio: zod.z.boolean().nullable().optional(),
 			ingest: zod.z.boolean().nullable().optional()
 		}), zod.z.object({ success: zod.z.literal(true) }), {
@@ -18129,6 +18187,34 @@ var pipelineOrchestratorCapability = {
 			kind: "mutation",
 			auth: "admin"
 		}),
+		/**
+		* Reset one node's pipeline to its hardware-aware defaults — the HONEST
+		* reset (replaces the executor's legacy `resetToDefault`, which cleared a
+		* dead persisted step-tree seed nothing in the live path read):
+		*   (a) strips every `modelId` pin from that node's
+		*       `agentSettings.addonDefaults` (cells revert to Auto — the node
+		*       resolves its own hardware-aware format default at runtime);
+		*   (b) clears per-camera step overrides scoped to that node
+		*       (`stepOverridesByAgent[node]` + the wholesale
+		*       `pipelineByAgent[node]` escape hatch);
+		*   (c) clears the executor-side per-device settings stores on that node
+		*       (`pipelineExecutor.clearDeviceOverrides`);
+		*   (d) hot-reloads every camera assigned to the node.
+		*
+		* Returns the EFFECTIVE post-reset object-detection model for the node
+		* (the executor's pure hardware-aware default) so the UI can report what
+		* will actually run — not a value that never reaches the live path.
+		*/
+		resetNodePipelineDefaults: require_sleep.method(zod.z.object({ agentNodeId: zod.z.string() }), zod.z.object({
+			success: zod.z.literal(true),
+			/** Hardware-aware default detection model now in effect on the node (null when unresolvable). */
+			effectiveModelId: zod.z.string().nullable(),
+			/** Number of cameras whose node-scoped overrides were cleared. */
+			clearedCameraOverrides: zod.z.number()
+		}), {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		/** Read one camera's settings. Null when never touched (inherits agent defaults fully). */
 		getCameraSettings: require_sleep.method(zod.z.object({ deviceId: zod.z.number() }), CameraPipelineSettingsSchema.nullable()),
 		/** Set or clear the 3-state toggle for one (camera, addonId). Pass `enabled: null` to clear and revert to agent default. */
@@ -18221,6 +18307,153 @@ var pipelineOrchestratorCapability = {
 	}
 };
 //#endregion
+//#region src/capabilities/server-management.cap.ts
+/**
+* server-management — per-NODE singleton capability for a node's ROOT
+* package lifecycle (runtime-updatable node packages, phase 2: hub + docker
+* agents).
+*
+* Each node's root package (`@camstack/server` on the hub, `@camstack/agent`
+* on agents) carries the whole software stack in its npm dep tree, so ONE
+* version describes the node. Updates install into
+* `<dataDir>/server-root/versions/<v>/` and apply on restart via the baked
+* starter (probation boot + auto-rollback to N-1).
+*
+* Providers:
+*   - HUB: `ServerUpdateService` behind the `server-provided` mount
+*     (`buildServerProviders` in trpc.router.ts) — the default target for
+*     unpinned calls.
+*   - AGENT: `AgentUpdateService` registered by the agent bootstrap under
+*     the synthetic `agent-runtime` addonId and declared in the agent's
+*     `$hub.registerNode` manifest.
+*
+* Node routing: singleton caps get the codegen/runtime-builder `nodeId`
+* injection on every method — `input.nodeId` (or `nodePin(nodeId)` from the
+* SDK) routes the call to that node's provider via the standard remote
+* proxy (`createCapabilityProxy` → `$agent-cap-fwd` → the agent's
+* in-process provider lookup). No `nodeId` → the hub's own provider.
+*
+* Spec: docs/superpowers/specs/2026-07-12-runtime-updatable-node-packages-design.md
+*/
+/**
+* Where the running hub's code was loaded from:
+*  - `workspace` — dev checkout (tsx / workspace dist); the starter defers to
+*    plain resolution and runtime updates are refused.
+*  - `baked`     — the immutable image seed closure (no data-dir root active).
+*  - `data-root` — the runtime-updatable `<dataDir>/server-root` closure.
+*/
+var ServerBootModeSchema = zod.z.enum([
+	"workspace",
+	"baked",
+	"data-root"
+]);
+/**
+* Update lifecycle state:
+*  - `idle` / `checking` / `staging` — steady / in-flight registry work.
+*  - `pending-restart` — a version is staged and the node has NOT yet
+*    restarted onto it (still running the OLD version).
+*  - `awaiting-confirmation` — the node HAS restarted onto the staged version
+*    (it is the active probation boot) and is waiting to confirm boot-health.
+*    Apply/rollback are refused in this state and the node must NOT be
+*    manually restarted, or the probation boot auto-rolls-back.
+*/
+var ServerUpdateStateSchema = zod.z.enum([
+	"idle",
+	"checking",
+	"staging",
+	"pending-restart",
+	"awaiting-confirmation"
+]);
+var ServerRollbackInfoSchema = zod.z.object({
+	/** The version that failed (or was manually rolled back). */
+	fromVersion: zod.z.string(),
+	/** The version rolled back to; null = the baked seed. */
+	toVersion: zod.z.string().nullable(),
+	atMs: zod.z.number(),
+	reason: zod.z.string()
+});
+var ServerPackageStatusSchema = zod.z.object({
+	/** Root package name (`@camstack/server` on the hub). */
+	packageName: zod.z.string(),
+	/** Version of the code the running process ACTUALLY loaded. */
+	runningVersion: zod.z.string().nullable(),
+	/** Node.js runtime version the node's process runs on (`process.versions.node`). */
+	nodeRuntimeVersion: zod.z.string().nullable(),
+	/** Active data-dir root version; null when booted from seed/workspace. */
+	activeVersion: zod.z.string().nullable(),
+	/** N-1 version kept for rollback; null when no previous version exists. */
+	previousVersion: zod.z.string().nullable(),
+	/** Version of the immutable baked seed closure (image fallback). */
+	seedVersion: zod.z.string().nullable(),
+	/** Latest registry version from the most recent check (null = never checked). */
+	latestVersion: zod.z.string().nullable(),
+	updateAvailable: zod.z.boolean(),
+	bootMode: ServerBootModeSchema,
+	updateState: ServerUpdateStateSchema,
+	/** Version staged + awaiting its probation boot, when one is pending. */
+	pendingVersion: zod.z.string().nullable(),
+	/** Set when the last freshly-activated version failed its boot health-check. */
+	rolledBack: ServerRollbackInfoSchema.nullable(),
+	/**
+	* True when `server-root/state.json` EXISTS but is unreadable/corrupt — the
+	* hub is running from the baked seed (or workspace) while installed data-dir
+	* versions are being IGNORED. Surfaced as a warning in the UI.
+	*/
+	stateFileCorrupt: zod.z.boolean(),
+	lastCheckedAtMs: zod.z.number().nullable()
+});
+var ServerUpdateCheckResultSchema = zod.z.object({
+	packageName: zod.z.string(),
+	runningVersion: zod.z.string().nullable(),
+	latestVersion: zod.z.string().nullable(),
+	updateAvailable: zod.z.boolean(),
+	checkedAtMs: zod.z.number(),
+	/** Non-null when the registry lookup failed (offline, bad registry, …). */
+	error: zod.z.string().nullable()
+});
+var ServerUpdateActionResultSchema = zod.z.object({
+	accepted: zod.z.boolean(),
+	targetVersion: zod.z.string().nullable(),
+	/** True when a graceful restart was scheduled to apply the change. */
+	restarting: zod.z.boolean(),
+	message: zod.z.string()
+});
+var serverManagementCapability = {
+	name: "server-management",
+	scope: "system",
+	mode: "singleton",
+	methods: {
+		getServerPackageStatus: require_sleep.method(zod.z.void(), ServerPackageStatusSchema, { auth: "admin" }),
+		checkServerUpdate: require_sleep.method(zod.z.void(), ServerUpdateCheckResultSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		applyServerUpdate: require_sleep.method(zod.z.object({ 
+		/** Explicit target version; omitted = latest from the registry. */
+version: zod.z.string().optional() }), ServerUpdateActionResultSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		rollbackServerUpdate: require_sleep.method(zod.z.void(), ServerUpdateActionResultSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		/**
+		* Plain process restart of the node's root process — no version change.
+		* The supervisor (docker restart policy / launchd / Electron main)
+		* relaunches and the starter loads the SAME active version. Refused while
+		* a stage is in flight or a version is already staged awaiting restart
+		* (use apply/rollback instead, so the pending version is not skipped).
+		*/
+		restartServer: require_sleep.method(zod.z.void(), ServerUpdateActionResultSchema, {
+			kind: "mutation",
+			auth: "admin"
+		})
+	},
+	/** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
+	mount: { kind: "server-provided" }
+};
+//#endregion
 //#region src/capabilities/settings-store.cap.ts
 /**
 * Query filter for settings-store collections.
@@ -21134,6 +21367,16 @@ var TopologyCategorySchema = zod.z.object({
 	healthy: zod.z.number(),
 	addons: zod.z.array(TopologyCategoryAddonSchema).readonly()
 });
+/**
+* The node's runtime-updatable ROOT package (`@camstack/server` on the hub,
+* `@camstack/agent` on agents) as reported by its `registerNode` manifest —
+* version visibility for the Server management surface. Nullable: offline
+* rows and pre-phase-2 nodes report none.
+*/
+var TopologyRootPackageSchema = zod.z.object({
+	name: zod.z.string(),
+	version: zod.z.string()
+});
 var TopologyNodeSchema = zod.z.object({
 	id: zod.z.string(),
 	name: zod.z.string(),
@@ -21157,7 +21400,8 @@ var TopologyNodeSchema = zod.z.object({
 		status: zod.z.string()
 	})).readonly(),
 	processes: zod.z.array(TopologyProcessSchema).readonly(),
-	categories: zod.z.array(TopologyCategorySchema).readonly()
+	categories: zod.z.array(TopologyCategorySchema).readonly(),
+	rootPackage: TopologyRootPackageSchema.nullable()
 });
 var CapUsageEdgeSchema = zod.z.object({
 	callerAddonId: zod.z.string(),
@@ -22662,6 +22906,7 @@ var CAPABILITY_NAMES = {
 	localNetwork: "local-network",
 	lockControl: "lock-control",
 	logDestination: "log-destination",
+	loginMethod: "login-method",
 	mediaPlayer: "media-player",
 	meshNetwork: "mesh-network",
 	metricsProvider: "metrics-provider",
@@ -22697,6 +22942,7 @@ var CAPABILITY_NAMES = {
 	reboot: "reboot",
 	recording: "recording",
 	scriptRunner: "script-runner",
+	serverManagement: "server-management",
 	settingsStore: "settings-store",
 	smoke: "smoke",
 	smtpProvider: "smtp-provider",
@@ -22721,6 +22967,7 @@ var CAPABILITY_NAMES = {
 	valve: "valve",
 	vibration: "vibration",
 	videoclips: "videoclips",
+	viewerUi: "viewer-ui",
 	waterHeater: "water-heater",
 	weather: "weather",
 	webrtcSession: "webrtc-session",
@@ -23010,6 +23257,10 @@ var CAPABILITY_ROUTER_KEYS = [
 		key: "logDestination",
 		name: "log-destination"
 	},
+	{
+		key: "loginMethod",
+		name: "login-method"
+	},
 	{
 		key: "mediaPlayer",
 		name: "media-player"
@@ -23150,6 +23401,10 @@ var CAPABILITY_ROUTER_KEYS = [
 		key: "scriptRunner",
 		name: "script-runner"
 	},
+	{
+		key: "serverManagement",
+		name: "server-management"
+	},
 	{
 		key: "settingsStore",
 		name: "settings-store"
@@ -23246,6 +23501,10 @@ var CAPABILITY_ROUTER_KEYS = [
 		key: "videoclips",
 		name: "videoclips"
 	},
+	{
+		key: "viewerUi",
+		name: "viewer-ui"
+	},
 	{
 		key: "waterHeater",
 		name: "water-heater"
@@ -23351,6 +23610,7 @@ var ALL_CAPABILITY_DEFINITIONS = [
 	localNetworkCapability,
 	lockControlCapability,
 	logDestinationCapability,
+	loginMethodCapability,
 	mediaPlayerCapability,
 	meshNetworkCapability,
 	metricsProviderCapability,
@@ -23386,6 +23646,7 @@ var ALL_CAPABILITY_DEFINITIONS = [
 	rebootCapability,
 	recordingCapability,
 	scriptRunnerCapability,
+	serverManagementCapability,
 	settingsStoreCapability,
 	smokeCapability,
 	smtpProviderCapability,
@@ -23410,6 +23671,7 @@ var ALL_CAPABILITY_DEFINITIONS = [
 	valveCapability,
 	vibrationCapability,
 	videoclipsCapability,
+	require_sleep.viewerUiCapability,
 	waterHeaterCapability,
 	weatherCapability,
 	webrtcSessionCapability,
@@ -25470,6 +25732,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"loginMethod.getLoginMethods": {
+		capName: "login-method",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"mediaPlayer.next": {
 		capName: "media-player",
 		capScope: "device",
@@ -26100,23 +26368,23 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
-	"pipelineExecutor.deleteModel": {
+	"pipelineExecutor.clearDeviceOverrides": {
 		capName: "pipeline-executor",
 		capScope: "system",
 		addonId: null,
 		access: "delete"
 	},
-	"pipelineExecutor.deleteTemplate": {
+	"pipelineExecutor.deleteModel": {
 		capName: "pipeline-executor",
 		capScope: "system",
 		addonId: null,
 		access: "delete"
 	},
-	"pipelineExecutor.detect": {
+	"pipelineExecutor.deleteTemplate": {
 		capName: "pipeline-executor",
 		capScope: "system",
 		addonId: null,
-		access: "view"
+		access: "delete"
 	},
 	"pipelineExecutor.downloadModel": {
 		capName: "pipeline-executor",
@@ -26262,12 +26530,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
-	"pipelineExecutor.resetToDefault": {
-		capName: "pipeline-executor",
-		capScope: "system",
-		addonId: null,
-		access: "delete"
-	},
 	"pipelineExecutor.runAudioTest": {
 		capName: "pipeline-executor",
 		capScope: "system",
@@ -26328,12 +26590,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
-	"pipelineOrchestrator.assignDecoder": {
-		capName: "pipeline-orchestrator",
-		capScope: "system",
-		addonId: null,
-		access: "create"
-	},
 	"pipelineOrchestrator.assignPipeline": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -26412,18 +26668,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"pipelineOrchestrator.getDecoderAssignment": {
-		capName: "pipeline-orchestrator",
-		capScope: "system",
-		addonId: null,
-		access: "view"
-	},
-	"pipelineOrchestrator.getDecoderAssignments": {
-		capName: "pipeline-orchestrator",
-		capScope: "system",
-		addonId: null,
-		access: "view"
-	},
 	"pipelineOrchestrator.getGlobalMetrics": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -26472,6 +26716,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "delete"
 	},
+	"pipelineOrchestrator.resetNodePipelineDefaults": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
 	"pipelineOrchestrator.resolvePipeline": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -26544,12 +26794,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
-	"pipelineOrchestrator.unassignDecoder": {
-		capName: "pipeline-orchestrator",
-		capScope: "system",
-		addonId: null,
-		access: "create"
-	},
 	"pipelineOrchestrator.unassignPipeline": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -26856,6 +27100,36 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"serverManagement.applyServerUpdate": {
+		capName: "server-management",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"serverManagement.checkServerUpdate": {
+		capName: "server-management",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"serverManagement.getServerPackageStatus": {
+		capName: "server-management",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"serverManagement.restartServer": {
+		capName: "server-management",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"serverManagement.rollbackServerUpdate": {
+		capName: "server-management",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"settingsStore.count": {
 		capName: "settings-store",
 		capScope: "system",
@@ -27720,6 +27994,18 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"viewerUi.getStaticDir": {
+		capName: "viewer-ui",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"viewerUi.getVersion": {
+		capName: "viewer-ui",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"waterHeater.setAway": {
 		capName: "water-heater",
 		capScope: "device",
@@ -27908,6 +28194,7 @@ var KNOWN_CAP_NAMES = [
 	"local-network",
 	"lock-control",
 	"log-destination",
+	"login-method",
 	"media-player",
 	"mesh-network",
 	"metrics-provider",
@@ -27939,6 +28226,7 @@ var KNOWN_CAP_NAMES = [
 	"reboot",
 	"recording",
 	"script-runner",
+	"server-management",
 	"settings-store",
 	"smtp-provider",
 	"snapshot",
@@ -27959,6 +28247,7 @@ var KNOWN_CAP_NAMES = [
 	"vacuum-control",
 	"valve",
 	"videoclips",
+	"viewer-ui",
 	"water-heater",
 	"webrtc-session",
 	"zone-analytics",
@@ -28051,6 +28340,7 @@ var SYSTEM_CAP_NAMES = [
 	"integrations",
 	"local-network",
 	"log-destination",
+	"login-method",
 	"mesh-network",
 	"metrics-provider",
 	"model-convert",
@@ -28067,6 +28357,7 @@ var SYSTEM_CAP_NAMES = [
 	"plate-gallery",
 	"platform-probe",
 	"recording",
+	"server-management",
 	"settings-store",
 	"smtp-provider",
 	"sso-bridge",
@@ -28078,7 +28369,8 @@ var SYSTEM_CAP_NAMES = [
 	"toast",
 	"turn-provider",
 	"user-management",
-	"user-passkeys"
+	"user-passkeys",
+	"viewer-ui"
 ];
 //#endregion
 //#region src/generated/scope-presets.ts
@@ -28811,12 +29103,10 @@ exports.DayNightSettingsPatchSchema = DayNightSettingsPatchSchema;
 exports.DayNightStatusSchema = DayNightStatusSchema;
 exports.DecodedAudioChunkSchema = require_sleep.DecodedAudioChunkSchema;
 exports.DecodedFrameSchema = require_sleep.DecodedFrameSchema;
-exports.DecoderAssignmentSchema = DecoderAssignmentSchema;
 exports.DecoderSessionConfigSchema = DecoderSessionConfigSchema;
 exports.DecoderStatsSchema = DecoderStatsSchema;
 exports.DeleteIntegrationResultSchema = DeleteIntegrationResultSchema;
 exports.DetectionSourceSchema = DetectionSourceSchema;
-exports.DetectorOutputSchema = DetectorOutputSchema;
 exports.DeviceCodeSeveritySchema = DeviceCodeSeveritySchema;
 exports.DeviceConfig = DeviceConfig;
 exports.DeviceDiscoveryStatusSchema = DeviceDiscoveryStatusSchema;
@@ -28905,6 +29195,8 @@ exports.LockStateSchema = LockStateSchema;
 exports.LogEntrySchema = LogEntrySchema;
 exports.LogLevelSchema = LogLevelSchema;
 exports.LogStreamEntrySchema = LogStreamEntrySchema;
+exports.LoginMethodContributionSchema = LoginMethodContributionSchema;
+exports.LoginStageEnum = LoginStageEnum;
 exports.MACRO_LABELS = MACRO_LABELS;
 exports.MAX_EXPRESSION_AST_NODES = MAX_EXPRESSION_AST_NODES;
 exports.MAX_EXPRESSION_BINDINGS = MAX_EXPRESSION_BINDINGS;
@@ -29050,6 +29342,7 @@ exports.RecordingStorageModeSchema = RecordingStorageModeSchema;
 exports.RecordingStorageUsageSchema = RecordingStorageUsageSchema;
 exports.RecordingTriggersSchema = RecordingTriggersSchema;
 exports.RecordingWeekdaySchema = RecordingWeekdaySchema;
+exports.RedirectLoginMethodSchema = RedirectLoginMethodSchema;
 exports.RenderedAsSchema = RenderedAsSchema;
 exports.ReportMotionInputSchema = ReportMotionInputSchema;
 exports.RingBuffer = RingBuffer;
@@ -29074,6 +29367,12 @@ exports.SearchResultSchema = SearchResultSchema;
 exports.SendEmailInputSchema = SendEmailInputSchema;
 exports.SendEmailResultSchema = SendEmailResultSchema;
 exports.SendResultSchema = SendResultSchema;
+exports.ServerBootModeSchema = ServerBootModeSchema;
+exports.ServerPackageStatusSchema = ServerPackageStatusSchema;
+exports.ServerRollbackInfoSchema = ServerRollbackInfoSchema;
+exports.ServerUpdateActionResultSchema = ServerUpdateActionResultSchema;
+exports.ServerUpdateCheckResultSchema = ServerUpdateCheckResultSchema;
+exports.ServerUpdateStateSchema = ServerUpdateStateSchema;
 exports.SettingsPatchSchema = SettingsPatchSchema;
 exports.SettingsRecordSchema = SettingsRecordSchema;
 exports.SettingsSchemaWithValuesSchema = SettingsSchemaWithValuesSchema;
@@ -29160,6 +29459,7 @@ exports.WebrtcStreamChoiceSchema = WebrtcStreamChoiceSchema;
 exports.WebrtcStreamTargetSchema = WebrtcStreamTargetSchema;
 exports.WhiteBalanceModeSchema = WhiteBalanceModeSchema;
 exports.WidgetHostEnum = WidgetHostEnum;
+exports.WidgetLoginMethodSchema = WidgetLoginMethodSchema;
 exports.WidgetMetadataSchema = WidgetMetadataSchema;
 exports.WidgetRemoteSchema = WidgetRemoteSchema;
 exports.WidgetSizeEnum = WidgetSizeEnum;
@@ -29219,6 +29519,8 @@ exports.cellsToRects = cellsToRects;
 exports.classifyStream = classifyStream;
 exports.classifyStreams = classifyStreams;
 exports.climateControlCapability = climateControlCapability;
+exports.collectHydratedFieldEntries = require_sleep.collectHydratedFieldEntries;
+exports.collectHydratedFieldValues = require_sleep.collectHydratedFieldValues;
 exports.colorCapability = colorCapability;
 exports.compileExpression = compileExpression;
 exports.compileExpressionSafe = compileExpressionSafe;
@@ -29314,6 +29616,7 @@ exports.localNetworkCapability = localNetworkCapability;
 exports.locationSimilarity = locationSimilarity;
 exports.lockControlCapability = lockControlCapability;
 exports.logDestinationCapability = logDestinationCapability;
+exports.loginMethodCapability = loginMethodCapability;
 exports.looseSchema = looseSchema;
 exports.makeProfileBrokerId = require_sleep.makeProfileBrokerId;
 exports.makeSourceBrokerId = require_sleep.makeSourceBrokerId;
@@ -29386,6 +29689,7 @@ exports.resolveCapMount = require_sleep.resolveCapMount;
 exports.resolveDetectionRuntime = resolveDetectionRuntime;
 exports.resolveDeviceProfile = resolveDeviceProfile;
 exports.resolveFormat = resolveFormat;
+exports.resolveHydratedFieldValue = require_sleep.resolveHydratedFieldValue;
 exports.resolveModelFormat = resolveModelFormat;
 exports.resolveRunnerId = resolveRunnerId;
 exports.resolveVariantModelId = resolveVariantModelId;
@@ -29395,6 +29699,7 @@ exports.scopeKey = require_sleep.scopeKey;
 exports.scoreRuntimes = scoreRuntimes;
 exports.scriptRunnerCapability = scriptRunnerCapability;
 exports.selectAssignedProfileSlots = require_sleep.selectAssignedProfileSlots;
+exports.serverManagementCapability = serverManagementCapability;
 exports.setByPath = setByPath;
 exports.settingsStoreCapability = settingsStoreCapability;
 exports.sleep = require_sleep.sleep;
@@ -29440,6 +29745,7 @@ exports.validateExpressionSource = validateExpressionSource;
 exports.valveCapability = valveCapability;
 exports.vibrationCapability = vibrationCapability;
 exports.videoclipsCapability = videoclipsCapability;
+exports.viewerUiCapability = require_sleep.viewerUiCapability;
 exports.waterHeaterCapability = waterHeaterCapability;
 exports.weatherCapability = weatherCapability;
 exports.webrtcClientHintsSchema = webrtcClientHintsSchema;